Mozilla vulnerabilities
2,561 CVEs and advisories name Mozilla as an affected vendor, 9 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-109730Integer overflow in the Graphics component
- CVE-2026-109729Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-109728Use-after-free in the DOM: Animation component
- CVE-2026-109727Use-after-free in the Audio/Video component
- CVE-2026-109726Use-after-free in the SVG component
- CVE-2026-109725Use-after-free in the DOM: Core & HTML component
- CVE-2026-109722JIT miscompilation in the JavaScript Engine: JIT component
- CVE-2026-109719Race condition, use-after-free in the Graphics: CanvasWebGL component
- CVE-2026-109718Use-after-free in the XML component
- CVE-2026-109716Incorrect boundary conditions in the JavaScript Engine component
- CVE-2026-109715Incorrect boundary conditions in the JavaScript Engine component
- CVE-2026-109712Sandbox escape due to uninitialized memory in the Graphics component
- CVE-2026-109710Use-after-free in the Graphics: Text component
- CVE-2026-109706Use-after-free in the Storage: IndexedDB component
- CVE-2026-103417Saved credentials can be autofilled after cross-origin navigation
- CVE-2026-103418Universal XSS via the HTML language attribute in Translation Services
- CVE-2026-106550CVE-2026-106550
- CVE-2026-106016Mitigation bypass in the File Handling component
- CVE-2026-103500Heap buffer overflow opening large email
- CVE-2026-100832Use-after-free in the Graphics: Canvas2D component
- CVE-2026-100831Use-after-free in the DOM: UI Events & Focus Handling component
- CVE-2026-100830Mitigation bypass in the DOM: Navigation component
- CVE-2026-100829Mitigation bypass in the DOM: Security component
- CVE-2026-100828Mitigation bypass in the Bookmarks & History component
- CVE-2026-100826Denial-of-service in the Storage: StorageManager component
- CVE-2026-100825Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-100824Privilege escalation in the Places component
- CVE-2026-100823Spoofing issue in the Downloads component in Firefox for Android
- CVE-2026-100822Spoofing issue in the Networking: HTTP component
- CVE-2026-100821Site isolation issue in the Panning and Zooming component